Last scanned:
AI verdict failed due to an error.
| CVE ID | Adjusted Severity | Package | Exploit Probability | Risk Context |
|---|---|---|---|---|
| CVE-2005-2541 | MEDIUM6 | tar 2:1.34-11.el9 No fix yet | 4.0% Low-Moderate Risk | Post-Exploit |
| CVE-2026-59871 | LOW3.82 | tar 2:1.34-11.el9 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-44604 | LOW3.57 | rpm 4.16.1.3-40.el9 No fix yet | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-33056 | LOW3.31 | tar 2:1.34-11.el9 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-44605 | LOW3.3 | rpm 4.16.1.3-40.el9 No fix yet | — | Post-Exploit |
| CVE-2022-0529 | LOW3.3 | unzip 6.0-60.el9 No fix yet | 2.4% Low-Moderate Risk | Post-Exploit |
| CVE-2022-0530 | LOW3.3 | unzip 6.0-60.el9 No fix yet | 2.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-24883 | LOW2.8 | gnupg2 2.3.3-5.el9_7 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-53655 | LOW2.8 | tar 2:1.34-11.el9 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-5704 | LOW2.8 | tar 2:1.34-11.el9 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-59875 | LOW2.7 | tar 2:1.34-11.el9 No fix yet | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2025-68972 | LOW2.4 | gnupg2 2.3.3-5.el9_7 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2025-30258 | LOW2.4 | gnupg2 2.3.3-5.el9_7 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2025-64118 | LOW2.4 | tar 2:1.34-11.el9 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2022-3219 | LOW1.68 | gnupg2 2.3.3-5.el9_7 No fix yet | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2023-39804 | LOW1.68 | tar 2:1.34-11.el9 No fix yet | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2021-4217 | LOW1.68 | unzip 6.0-60.el9 No fix yet | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-57062 | LOW1.48 | gnupg2 2.3.3-5.el9_7 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-6653 | NONE0 | libxml2 2.9.13-14.el9_7 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-31789 | NONE0 | openssl-libs 1:3.5.5-4.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2017-6519 | NONE0 | avahi-libs 0.8-23.el9 No fix yet | 3.2% Low-Moderate Risk | Not Applicable |
| CVE-2026-58016 | NONE0 | glib2 2.68.4-19.el9_8.1 fixed in 2.68.4-19.el9_8.2 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-49268 | NONE0 | org.apache.shiro:shiro-core 1.13.0 fixed in 2.2.1, 3.0.0-alpha-2 | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-58014 | NONE0 | glib2 2.68.4-19.el9_8.1 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-58010 | NONE0 | glib2 2.68.4-19.el9_8.1 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-58012 | NONE0 | glib2 2.68.4-19.el9_8.1 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-58013 | NONE0 | glib2 2.68.4-19.el9_8.1 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-8286 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-8925 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2025-15079 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-8286 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-8925 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2025-15079 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-28387 | NONE0 | openssl-libs 1:3.5.5-4.el9_8 No fix yet | 0.8% Theoretical Threat | Not Applicable |
| CVE-2026-48864 | NONE0 | libsolv 0.7.24-5.el9_8 fixed in 0.7.24-6.el9_8 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-11979 | NONE0 | libxml2 2.9.13-14.el9_7 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-11352 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-11586 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-5773 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-6276 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-58011 | NONE0 | glib2 2.68.4-19.el9_8.1 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-58015 | NONE0 | glib2 2.68.4-19.el9_8.1 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2023-32636 | NONE0 | glib2 2.68.4-19.el9_8.1 No fix yet | 0.8% Theoretical Threat | Not Applicable |
| CVE-2026-47063 | NONE0 | java-21-openjdk-headless 1:21.0.11.0.10-2.el9 fixed in 1:21.0.12.0.8-1.2.el9 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-41254 | NONE0 | java-21-openjdk-headless 1:21.0.11.0.10-2.el9 fixed in 1:21.0.12.0.8-1.2.el9 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-14164 | NONE0 | libarchive 3.5.3-9.el9_7 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-11352 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-11586 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-5773 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-6276 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-41989 | NONE0 | libgcrypt 1.10.0-11.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-6732 | NONE0 | libxml2 2.9.13-14.el9_7 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2025-27113 | NONE0 | libxml2 2.9.13-14.el9_7 No fix yet | 1.0% Low-Moderate Risk | Not Applicable |
| CVE-2026-28388 | NONE0 | openssl-libs 1:3.5.5-4.el9_8 No fix yet | 1.1% Low-Moderate Risk | Not Applicable |
| CVE-2026-28389 | NONE0 | openssl-libs 1:3.5.5-4.el9_8 No fix yet | 1.0% Low-Moderate Risk | Not Applicable |
| CVE-2022-41409 | NONE0 | pcre2 10.40-6.el9 No fix yet | 1.1% Low-Moderate Risk | Not Applicable |
| CVE-2022-41409 | NONE0 | pcre2-syntax 10.40-6.el9 No fix yet | 1.1% Low-Moderate Risk | Not Applicable |
| CVE-2026-15308 | NONE0 | python3 3.9.25-7.el9_8 fixed in 3.9.25-7.el9_8.2 | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-3644 | NONE0 | python3 3.9.25-7.el9_8 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-4224 | NONE0 | python3 3.9.25-7.el9_8 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-7210 | NONE0 | python3 3.9.25-7.el9_8 No fix yet | 0.8% Theoretical Threat | Not Applicable |
| CVE-2026-15308 | NONE0 | python3-libs 3.9.25-7.el9_8 fixed in 3.9.25-7.el9_8.2 | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-3644 | NONE0 | python3-libs 3.9.25-7.el9_8 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-4224 | NONE0 | python3-libs 3.9.25-7.el9_8 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-7210 | NONE0 | python3-libs 3.9.25-7.el9_8 No fix yet | 0.8% Theoretical Threat | Not Applicable |
| CVE-2026-59901 | NONE0 | io.netty:netty-codec-compression 4.2.15.Final fixed in 4.2.16.Final | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-55831 | NONE0 | io.netty:netty-codec-http 4.2.15.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-55833 | NONE0 | io.netty:netty-codec-http 4.2.15.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-56745 | NONE0 | io.netty:netty-codec-http 4.2.15.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-56746 | NONE0 | io.netty:netty-codec-http 4.2.15.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-59899 | NONE0 | io.netty:netty-codec-http 4.2.15.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-56819 | NONE0 | io.netty:netty-codec-http2 4.2.15.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-9547 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-9547 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2023-4156 | NONE0 | gawk 5.1.0-6.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-16118 | NONE0 | glib2 2.68.4-19.el9_8.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-54369 | NONE0 | libacl 2.3.1-4.el9 fixed in 2.4.0-1.el9_8 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-44604 | NONE0 | rpm-libs 4.16.1.3-40.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2025-13034 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-1965 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-13034 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-1965 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-22185 | NONE0 | openldap 2.6.8-4.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-4105 | NONE0 | systemd-libs 252-67.el9_8.2 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2025-5915 | NONE0 | libarchive 3.5.3-9.el9_7 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-5918 | NONE0 | libarchive 3.5.3-9.el9_7 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-68468 | NONE0 | avahi-libs 0.8-23.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-68471 | NONE0 | avahi-libs 0.8-23.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-24401 | NONE0 | avahi-libs 0.8-23.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-11856 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-3784 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-5545 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-6429 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-8924 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2024-7264 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 17.3% High Exploitation Risk | Not Applicable |
| CVE-2024-9681 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 2.0% Low-Moderate Risk | Not Applicable |
| CVE-2025-14524 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-6238 | NONE0 | glibc 2.34-270.el9_8 fixed in 2.34-274.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-6238 | NONE0 | glibc-common 2.34-270.el9_8 fixed in 2.34-274.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-6238 | NONE0 | glibc-langpack-en 2.34-270.el9_8 fixed in 2.34-274.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-6238 | NONE0 | glibc-minimal-langpack 2.34-270.el9_8 fixed in 2.34-274.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-60147 | NONE0 | java-21-openjdk-headless 1:21.0.11.0.10-2.el9 fixed in 1:21.0.12.0.8-1.2.el9 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-4426 | NONE0 | libarchive 3.5.3-9.el9_7 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-11856 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-3784 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-5545 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-6429 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-8924 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2024-7264 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 17.3% High Exploitation Risk | Not Applicable |
| CVE-2024-9681 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 2.0% Low-Moderate Risk | Not Applicable |
| CVE-2025-14524 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-9149 | NONE0 | libsolv 0.7.24-5.el9_8 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-9150 | NONE0 | libsolv 0.7.24-5.el9_8 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2023-45322 | NONE0 | libxml2 2.9.13-14.el9_7 No fix yet | 0.8% Theoretical Threat | Not Applicable |
| CVE-2023-50495 | NONE0 | ncurses-base 6.2-12.20210508.el9 No fix yet | 1.0% Theoretical Threat | Not Applicable |
| CVE-2023-50495 | NONE0 | ncurses-libs 6.2-12.20210508.el9 No fix yet | 1.0% Theoretical Threat | Not Applicable |
| CVE-2024-7531 | NONE0 | nspr 4.36.0-8.el9_4 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2024-7531 | NONE0 | nss 3.112.0-8.el9_4 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2024-7531 | NONE0 | nss-softokn 3.112.0-8.el9_4 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2024-7531 | NONE0 | nss-softokn-freebl 3.112.0-8.el9_4 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2024-7531 | NONE0 | nss-sysinit 3.112.0-8.el9_4 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2024-7531 | NONE0 | nss-util 3.112.0-8.el9_4 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-2673 | NONE0 | openssl-fips-provider 3.0.7-8.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-2673 | NONE0 | openssl-fips-provider-so 3.0.7-8.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-2673 | NONE0 | openssl-libs 1:3.5.5-4.el9_8 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-11972 | NONE0 | python3 3.9.25-7.el9_8 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-11972 | NONE0 | python3-libs 3.9.25-7.el9_8 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-59900 | NONE0 | io.netty:netty-codec-http2 4.2.15.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-43827 | NONE0 | org.apache.shiro:shiro-core 1.13.0 fixed in 2.2.0, 3.0.0-alpha-2 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-43828 | NONE0 | org.apache.shiro:shiro-web 1.13.0 fixed in 2.2.0, 3.0.0-alpha-2 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-54370 | NONE0 | libacl 2.3.1-4.el9 fixed in 2.4.0-1.el9_8 | <0.1% Theoretical Threat | Not Applicable |
| CVE-2026-54371 | NONE0 | libattr 2.5.1-3.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-5958 | NONE0 | sed 4.8-10.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-1757 | NONE0 | libxml2 2.9.13-14.el9_7 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-13757 | NONE0 | p11-kit 0.26.2-1.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-13757 | NONE0 | p11-kit-trust 0.26.2-1.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-56391 | NONE0 | coreutils-single 8.32-40.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2025-64506 | NONE0 | java-21-openjdk-headless 1:21.0.11.0.10-2.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-6019 | NONE0 | python3 3.9.25-7.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-6019 | NONE0 | python3-libs 3.9.25-7.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-50181 | NONE0 | python3-pip-wheel 21.3.1-2.el9_8 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-50182 | NONE0 | python3-pip-wheel 21.3.1-2.el9_8 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-5713 | NONE0 | python3 3.9.25-7.el9_8 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-5713 | NONE0 | python3-libs 3.9.25-7.el9_8 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2024-11053 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 1.4% Low-Moderate Risk | Not Applicable |
| CVE-2026-5435 | NONE0 | glibc 2.34-270.el9_8 fixed in 2.34-274.el9_8 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-5435 | NONE0 | glibc-common 2.34-270.el9_8 fixed in 2.34-274.el9_8 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-5435 | NONE0 | glibc-langpack-en 2.34-270.el9_8 fixed in 2.34-274.el9_8 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-5435 | NONE0 | glibc-minimal-langpack 2.34-270.el9_8 fixed in 2.34-274.el9_8 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-46968 | NONE0 | java-21-openjdk-headless 1:21.0.11.0.10-2.el9 fixed in 1:21.0.12.0.8-1.2.el9 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2024-11053 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 1.4% Low-Moderate Risk | Not Applicable |
| CVE-2025-13151 | NONE0 | libtasn1 4.16.0-9.el9 fixed in 4.16.0-10.el9_8 | 1.1% Low-Moderate Risk | Not Applicable |
| CVE-2026-0990 | NONE0 | libxml2 2.9.13-14.el9_7 No fix yet | 0.8% Theoretical Threat | Not Applicable |
| CVE-2020-12413 | NONE0 | nspr 4.36.0-8.el9_4 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2020-12413 | NONE0 | nss 3.112.0-8.el9_4 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2020-12413 | NONE0 | nss-softokn 3.112.0-8.el9_4 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2020-12413 | NONE0 | nss-softokn-freebl 3.112.0-8.el9_4 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2020-12413 | NONE0 | nss-sysinit 3.112.0-8.el9_4 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2020-12413 | NONE0 | nss-util 3.112.0-8.el9_4 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-31790 | NONE0 | openssl-fips-provider 3.0.7-8.el9 fixed in 3.0.7-11.el9_8 | 1.2% Low-Moderate Risk | Not Applicable |
| CVE-2026-31790 | NONE0 | openssl-fips-provider-so 3.0.7-8.el9 fixed in 3.0.7-11.el9_8 | 1.2% Low-Moderate Risk | Not Applicable |
| CVE-2024-41996 | NONE0 | openssl-libs 1:3.5.5-4.el9_8 No fix yet | 1.1% Low-Moderate Risk | Not Applicable |
| CVE-2026-32284 | NONE0 | python3-pip-wheel 21.3.1-2.el9_8 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-54291 | NONE0 | org.postgresql:postgresql 42.7.11 fixed in 42.7.12 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-3783 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-3783 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2021-3572 | NONE0 | python3-pip-wheel 21.3.1-2.el9_8 No fix yet | 1.7% Low-Moderate Risk | Not Applicable |
| CVE-2026-59921 | NONE0 | io.netty:netty-codec-http 4.2.15.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-5916 | NONE0 | libarchive 3.5.3-9.el9_7 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-59529 | NONE0 | avahi-libs 0.8-23.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-68276 | NONE0 | avahi-libs 0.8-23.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-34933 | NONE0 | avahi-libs 0.8-23.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-27171 | NONE0 | java-21-openjdk-headless 1:21.0.11.0.10-2.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-60753 | NONE0 | libarchive 3.5.3-9.el9_7 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-5745 | NONE0 | libarchive 3.5.3-9.el9_7 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-1632 | NONE0 | libarchive 3.5.3-9.el9_7 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2021-46195 | NONE0 | libgcc 11.5.0-14.el9 No fix yet | 0.8% Theoretical Threat | Not Applicable |
| CVE-2022-27943 | NONE0 | libgcc 11.5.0-14.el9 No fix yet | 0.9% Theoretical Threat | Not Applicable |
| CVE-2021-46195 | NONE0 | libstdc++ 11.5.0-14.el9 No fix yet | 0.8% Theoretical Threat | Not Applicable |
| CVE-2022-27943 | NONE0 | libstdc++ 11.5.0-14.el9 No fix yet | 0.9% Theoretical Threat | Not Applicable |
| CVE-2024-34459 | NONE0 | libxml2 2.9.13-14.el9_7 fixed in 2.9.13-14.el9_8.1 | 2.3% Low-Moderate Risk | Not Applicable |
| CVE-2025-13837 | NONE0 | python3 3.9.25-7.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-42308 | NONE0 | python3 3.9.25-7.el9_8 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2025-13837 | NONE0 | python3-libs 3.9.25-7.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-42308 | NONE0 | python3-libs 3.9.25-7.el9_8 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-25645 | NONE0 | python3-pip-wheel 21.3.1-2.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-44605 | NONE0 | rpm-libs 4.16.1.3-40.el9 No fix yet | — | Not Applicable |
| CVE-2024-0232 | NONE0 | sqlite-libs 3.34.1-10.el9_8 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-27171 | NONE0 | zlib 1.2.11-40.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-1489 | NONE0 | glib2 2.68.4-19.el9_8.1 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-58055 | NONE0 | libnghttp2 1.43.0-6.el9_8.1 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-4873 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-6253 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-7168 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-15588 | NONE0 | glib2 2.68.4-19.el9_8.1 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-22693 | NONE0 | java-21-openjdk-headless 1:21.0.11.0.10-2.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-46917 | NONE0 | java-21-openjdk-headless 1:21.0.11.0.10-2.el9 fixed in 1:21.0.12.0.8-1.2.el9 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-47021 | NONE0 | java-21-openjdk-headless 1:21.0.11.0.10-2.el9 fixed in 1:21.0.12.0.8-1.2.el9 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-47027 | NONE0 | java-21-openjdk-headless 1:21.0.11.0.10-2.el9 fixed in 1:21.0.12.0.8-1.2.el9 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2023-30571 | NONE0 | libarchive 3.5.3-9.el9_7 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-13595 | NONE0 | libblkid 2.37.4-25.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-4873 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-6253 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-7168 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-13595 | NONE0 | libmount 2.37.4-25.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-13595 | NONE0 | libsmartcols 2.37.4-25.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-13595 | NONE0 | libuuid 2.37.4-25.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2025-12781 | NONE0 | python3 3.9.25-7.el9_8 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-3276 | NONE0 | python3 3.9.25-7.el9_8 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2025-12781 | NONE0 | python3-libs 3.9.25-7.el9_8 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-3276 | NONE0 | python3-libs 3.9.25-7.el9_8 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-45409 | NONE0 | python3-pip-wheel 21.3.1-2.el9_8 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-34743 | NONE0 | xz-libs 5.2.5-8.el9_0 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-54515 | NONE0 | com.fasterxml.jackson.core:jackson-databind 2.22.0 fixed in 3.1.4, 2.18.9, 2.21.5, 2.22.1 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-59898 | NONE0 | io.netty:netty-codec-http 4.2.15.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-23903 | NONE0 | org.apache.shiro:shiro-spring 1.13.0 fixed in 2.1.0 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-4516 | NONE0 | python3 3.9.25-7.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-4516 | NONE0 | python3-libs 3.9.25-7.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-42250 | NONE0 | bzip2-libs 1.0.8-11.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-5450 | NONE0 | glibc 2.34-270.el9_8 fixed in 2.34-272.el9_8 | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-5928 | NONE0 | glibc 2.34-270.el9_8 fixed in 2.34-274.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-5450 | NONE0 | glibc-common 2.34-270.el9_8 fixed in 2.34-272.el9_8 | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-5928 | NONE0 | glibc-common 2.34-270.el9_8 fixed in 2.34-274.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-5450 | NONE0 | glibc-langpack-en 2.34-270.el9_8 fixed in 2.34-272.el9_8 | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-5928 | NONE0 | glibc-langpack-en 2.34-270.el9_8 fixed in 2.34-274.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-5450 | NONE0 | glibc-minimal-langpack 2.34-270.el9_8 fixed in 2.34-272.el9_8 | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-5928 | NONE0 | glibc-minimal-langpack 2.34-270.el9_8 fixed in 2.34-274.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-28164 | NONE0 | java-21-openjdk-headless 1:21.0.11.0.10-2.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-11850 | NONE0 | krb5-libs 1.21.1-10.el9_8 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-5917 | NONE0 | libarchive 3.5.3-9.el9_7 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-14017 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-8926 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-14017 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-8926 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-15282 | NONE0 | python3 3.9.25-7.el9_8 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-0672 | NONE0 | python3 3.9.25-7.el9_8 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-15282 | NONE0 | python3-libs 3.9.25-7.el9_8 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-0672 | NONE0 | python3-libs 3.9.25-7.el9_8 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-15224 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-27456 | NONE0 | libblkid 2.37.4-25.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2025-15224 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-27456 | NONE0 | libmount 2.37.4-25.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-27456 | NONE0 | libsmartcols 2.37.4-25.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-27456 | NONE0 | libuuid 2.37.4-25.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2024-13176 | NONE0 | openssl-libs 1:3.5.5-4.el9_8 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2025-11468 | NONE0 | python3 3.9.25-7.el9_8 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-1502 | NONE0 | python3 3.9.25-7.el9_8 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2025-11468 | NONE0 | python3-libs 3.9.25-7.el9_8 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-1502 | NONE0 | python3-libs 3.9.25-7.el9_8 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2025-5278 | NONE0 | coreutils-single 8.32-40.el9 fixed in 8.32-41.el9_8 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-56392 | NONE0 | coreutils-single 8.32-40.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2025-64505 | NONE0 | java-21-openjdk-headless 1:21.0.11.0.10-2.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-34757 | NONE0 | java-21-openjdk-headless 1:21.0.11.0.10-2.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-25068 | NONE0 | alsa-lib 1.2.15.3-1.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-1484 | NONE0 | glib2 2.68.4-19.el9_8.1 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2023-45803 | NONE0 | python3-pip-wheel 21.3.1-2.el9_8 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-15028 | NONE0 | libarchive 3.5.3-9.el9_7 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-3360 | NONE0 | glib2 2.68.4-19.el9_8.1 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-7039 | NONE0 | glib2 2.68.4-19.el9_8.1 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-0988 | NONE0 | glib2 2.68.4-19.el9_8.1 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-47010 | NONE0 | java-21-openjdk-headless 1:21.0.11.0.10-2.el9 fixed in 1:21.0.12.0.8-1.2.el9 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-47059 | NONE0 | java-21-openjdk-headless 1:21.0.11.0.10-2.el9 fixed in 1:21.0.12.0.8-1.2.el9 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-0989 | NONE0 | libxml2 2.9.13-14.el9_7 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-41990 | NONE0 | libgcrypt 1.10.0-11.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-13462 | NONE0 | python3 3.9.25-7.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-2297 | NONE0 | python3 3.9.25-7.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-3479 | NONE0 | python3 3.9.25-7.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-13462 | NONE0 | python3-libs 3.9.25-7.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-2297 | NONE0 | python3-libs 3.9.25-7.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-3479 | NONE0 | python3-libs 3.9.25-7.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-70873 | NONE0 | sqlite-libs 3.34.1-10.el9_8 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-9232 | NONE0 | openssl-libs 1:3.5.5-4.el9_8 No fix yet | 2.3% Low-Moderate Risk | Not Applicable |
| CVE-2025-1795 | NONE0 | python3 3.9.25-7.el9_8 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2025-1795 | NONE0 | python3-libs 3.9.25-7.el9_8 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-16517 | NONE0 | libarchive 3.5.3-9.el9_7 No fix yet | <0.1% Theoretical Threat | Not Applicable |
| CVE-2026-0992 | NONE0 | libxml2 2.9.13-14.el9_7 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-1485 | NONE0 | glib2 2.68.4-19.el9_8.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2025-6170 | NONE0 | libxml2 2.9.13-14.el9_7 fixed in 2.9.13-14.el9_8.2 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-23901 | NONE0 | org.apache.shiro:shiro-core 1.13.0 fixed in 2.1.0 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-22020 | NONE0 | java-21-openjdk-headless 1:21.0.11.0.10-2.el9 No fix yet | — | Not Applicable |
| CVE-2026-10532 | NONE0 | ch.qos.logback:logback-core 1.5.32 fixed in 1.5.34 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-9828 | NONE0 | ch.qos.logback:logback-core 1.5.32 fixed in 1.5.33 | 0.4% Theoretical Threat | Not Applicable |
| GHSA-r7wm-3cxj-wff9 | NONE0 | com.fasterxml.jackson.core:jackson-core 2.22.0 fixed in 2.18.8, 2.21.4, 2.22.1 | — | Not Applicable |
| CVE-2026-59889 | NONE0 | com.fasterxml.jackson.core:jackson-databind 2.22.0 fixed in 2.21.5, 2.18.9, 2.22.1 | 0.3% Theoretical Threat | Not Applicable |
| GHSA-mfg7-5gfp-c4w3 | NONE0 | io.netty:netty-codec-dns 4.2.15.Final fixed in 4.2.16.Final, 4.1.136.Final | — | Not Applicable |
| CVE-2026-56816 | NONE0 | io.netty:netty-codec-http3 4.2.15.Final fixed in 4.2.16.Final | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-10050 | NONE0 | org.eclipse.jetty.ee8:jetty-ee8-security 12.0.33 fixed in 12.0.36, 12.1.10 | — | Not Applicable |
| CVE-2026-8384 | NONE0 | org.eclipse.jetty:jetty-util 12.0.33 fixed in 12.0.35, 12.1.9 | 0.2% Theoretical Threat | Not Applicable |
| GHSA-r7wm-3cxj-wff9 | NONE0 | tools.jackson.core:jackson-core 3.2.0 fixed in 3.1.4, 3.2.1 | — | Not Applicable |
| CVE-2026-59889 | NONE0 | tools.jackson.core:jackson-databind 3.2.0 fixed in 3.1.5, 3.2.1 | 0.3% Theoretical Threat | Not Applicable |
Which CVEs are actually reachable — is the vulnerable code even linked and callable.
Live-container probes: default user, writable paths, capabilities, exposed ports.
A step-by-step hardened build plan, with parity tests proving nothing breaks.
Want to check another image? Run a full scan with the Docker Security Scanner.